SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption.
SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated as a non-administrative user could exploit this vulnerability by providing specially crafted input, causing the Web Dispatcher process to terminate without user interaction. As a result, the Web Dispatcher and all backend systems reachable through it become unavailable, leading to a high impact on availability. There is no impact on confidentiality or integrity of the application.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SAP_SE
- Product
- SAP Web Dispatcher
- CVSS v3.1
- 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- Weakness
- CWE-121
- Exposure class
- Network management
- NVD status
- Received
Why it ranks 36 (Notable)
- CVSS v3.1 7.7 high
- Product class: network management
- Widely deployed vendor product (SAP_SE)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.